Re: [ceph-users] active directory integration with cephfs

[Benjeman Meekhof]

I can comment on that docker image:  We built that to bake in a
certain amount of config regarding nfs-ganesha serving CephFS and
using LDAP to do idmap lookups (example ldap entries are in readme).
At least as we use it the server-side uid/gid information is pulled
from sssd using a config file on the machine hosting the docker image
but one could probably also map passwd files to the image.  Most of it
is configurable with environment vars if some other usage were
desired, or it could be a good start to build something specific to
your needs.  The README is a bit out of date as the image now uses
mimic and ganesha 2.6.  We use it successfully to serve CephFS to a
few krb5 authenticated clients / users and have them be mapped to
uid/gid/gidlist out of our LDAP directory instead of their local info.
  I'm happy to answer questions on the list or via direct email if
that's more appropriate.

thanks,
Ben

On Thu, Jul 26, 2018 at 4:32 AM, John Hearns  wrote:
> NFS Ganesha certainly works with Cephfs. I would investigate that also.
> http://docs.ceph.com/docs/master/cephfs/nfs/
>
> Regarding Active Directory, I have done a lot of work recently with sssd.
> Not entirely relevant to this list, please send me a mail offline.
>
> Not sure if this is any direct use
> https://github.com/MI-OSiRIS/docker-nfs-ganesha-ceph
>
>
>
>
>
>
>
>
>
> On Thu, 26 Jul 2018 at 08:34, Serkan Çoban  wrote:
>>
>> You can do it by exporting cephfs by samba. I don't think any other
>> way exists for cephfs.
>>
>> On Thu, Jul 26, 2018 at 9:12 AM, Manuel Sopena Ballesteros
>>  wrote:
>> > Dear Ceph community,
>> >
>> >
>> >
>> > I am quite new to Ceph but trying to learn as much quick as I can. We
>> > are
>> > deploying our first Ceph production cluster in the next few weeks, we
>> > choose
>> > luminous and our goal is to have cephfs. One of the question I have been
>> > asked by other members of our team is if there is a possibility to
>> > integrate
>> > ceph authentication/authorization with Active Directory. I have seen in
>> > the
>> > documentations that objct gateway can do this but I am not about cephfs.
>> >
>> >
>> >
>> > Anyone has any idea if I can integrate cephfs with AD?
>> >
>> >
>> >
>> > Thank you very much
>> >
>> >
>> >
>> > Manuel Sopena Ballesteros | Big data Engineer
>> > Garvan Institute of Medical Research
>> > The Kinghorn Cancer Centre, 370 Victoria Street, Darlinghurst, NSW 2010
>> > T: + 61 (0)2 9355 5760 | F: +61 (0)2 9295 8507 | E:
>> > manuel...@garvan.org.au
>> >
>> >
>> >
>> > NOTICE
>> > Please consider the environment before printing this email. This message
>> > and
>> > any attachments are intended for the addressee named and may contain
>> > legally
>> > privileged/confidential/copyright information. If you are not the
>> > intended
>> > recipient, you should not read, use, disclose, copy or distribute this
>> > communication. If you have received this message in error please notify
>> > us
>> > at once by return email and then delete both messages. We accept no
>> > liability for the distribution of viruses or similar in electronic
>> > communications. This notice should not be removed.
>> >
>> > ___
>> > ceph-users mailing list
>> > ceph-users@lists.ceph.com
>> > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>> >
>> ___
>> ceph-users mailing list
>> ceph-users@lists.ceph.com
>> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
>
> ___
> ceph-users mailing list
> ceph-users@lists.ceph.com
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

Re: [ceph-users] active directory integration with cephfs

[John Hearns]

NFS Ganesha certainly works with Cephfs. I would investigate that also.
http://docs.ceph.com/docs/master/cephfs/nfs/

Regarding Active Directory, I have done a lot of work recently with sssd.
Not entirely relevant to this list, please send me a mail offline.

Not sure if this is any direct use
https://github.com/MI-OSiRIS/docker-nfs-ganesha-ceph









On Thu, 26 Jul 2018 at 08:34, Serkan Çoban  wrote:

> You can do it by exporting cephfs by samba. I don't think any other
> way exists for cephfs.
>
> On Thu, Jul 26, 2018 at 9:12 AM, Manuel Sopena Ballesteros
>  wrote:
> > Dear Ceph community,
> >
> >
> >
> > I am quite new to Ceph but trying to learn as much quick as I can. We are
> > deploying our first Ceph production cluster in the next few weeks, we
> choose
> > luminous and our goal is to have cephfs. One of the question I have been
> > asked by other members of our team is if there is a possibility to
> integrate
> > ceph authentication/authorization with Active Directory. I have seen in
> the
> > documentations that objct gateway can do this but I am not about cephfs.
> >
> >
> >
> > Anyone has any idea if I can integrate cephfs with AD?
> >
> >
> >
> > Thank you very much
> >
> >
> >
> > Manuel Sopena Ballesteros | Big data Engineer
> > Garvan Institute of Medical Research
> > The Kinghorn Cancer Centre, 370 Victoria Street, Darlinghurst, NSW 2010
> > T: + 61 (0)2 9355 5760 | F: +61 (0)2 9295 8507 | E:
> manuel...@garvan.org.au
> >
> >
> >
> > NOTICE
> > Please consider the environment before printing this email. This message
> and
> > any attachments are intended for the addressee named and may contain
> legally
> > privileged/confidential/copyright information. If you are not the
> intended
> > recipient, you should not read, use, disclose, copy or distribute this
> > communication. If you have received this message in error please notify
> us
> > at once by return email and then delete both messages. We accept no
> > liability for the distribution of viruses or similar in electronic
> > communications. This notice should not be removed.
> >
> > ___
> > ceph-users mailing list
> > ceph-users@lists.ceph.com
> > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
> >
> ___
> ceph-users mailing list
> ceph-users@lists.ceph.com
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

Re: [ceph-users] active directory integration with cephfs

[Serkan Çoban]

You can do it by exporting cephfs by samba. I don't think any other
way exists for cephfs.

On Thu, Jul 26, 2018 at 9:12 AM, Manuel Sopena Ballesteros
 wrote:
> Dear Ceph community,
>
>
>
> I am quite new to Ceph but trying to learn as much quick as I can. We are
> deploying our first Ceph production cluster in the next few weeks, we choose
> luminous and our goal is to have cephfs. One of the question I have been
> asked by other members of our team is if there is a possibility to integrate
> ceph authentication/authorization with Active Directory. I have seen in the
> documentations that objct gateway can do this but I am not about cephfs.
>
>
>
> Anyone has any idea if I can integrate cephfs with AD?
>
>
>
> Thank you very much
>
>
>
> Manuel Sopena Ballesteros | Big data Engineer
> Garvan Institute of Medical Research
> The Kinghorn Cancer Centre, 370 Victoria Street, Darlinghurst, NSW 2010
> T: + 61 (0)2 9355 5760 | F: +61 (0)2 9295 8507 | E: manuel...@garvan.org.au
>
>
>
> NOTICE
> Please consider the environment before printing this email. This message and
> any attachments are intended for the addressee named and may contain legally
> privileged/confidential/copyright information. If you are not the intended
> recipient, you should not read, use, disclose, copy or distribute this
> communication. If you have received this message in error please notify us
> at once by return email and then delete both messages. We accept no
> liability for the distribution of viruses or similar in electronic
> communications. This notice should not be removed.
>
> ___
> ceph-users mailing list
> ceph-users@lists.ceph.com
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
>
___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

[ceph-users] active directory integration with cephfs

[Manuel Sopena Ballesteros]

Dear Ceph community,

I am quite new to Ceph but trying to learn as much quick as I can. We are 
deploying our first Ceph production cluster in the next few weeks, we choose 
luminous and our goal is to have cephfs. One of the question I have been asked 
by other members of our team is if there is a possibility to integrate ceph 
authentication/authorization with Active Directory. I have seen in the 
documentations that objct gateway can do this but I am not about cephfs.

Anyone has any idea if I can integrate cephfs with AD?

Thank you very much

Manuel Sopena Ballesteros | Big data Engineer
Garvan Institute of Medical Research
The Kinghorn Cancer Centre, 370 Victoria Street, Darlinghurst, NSW 2010
T: + 61 (0)2 9355 5760 | F: +61 (0)2 9295 8507 | E: 
manuel...@garvan.org.au

NOTICE
Please consider the environment before printing this email. This message and 
any attachments are intended for the addressee named and may contain legally 
privileged/confidential/copyright information. If you are not the intended 
recipient, you should not read, use, disclose, copy or distribute this 
communication. If you have received this message in error please notify us at 
once by return email and then delete both messages. We accept no liability for 
the distribution of viruses or similar in electronic communications. This 
notice should not be removed.
___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com